
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/470E849A389E11EF83D66176C4F9AE02.roa
File: 470E849A389E11EF83D66176C4F9AE02.roa (raw, json)
Hash identifier: MkXldkwwGPBMNO0p6m3CW8J6w5UO09g/B7IP6QByn5c=
Subject key identifier: FD:F5:2E:62:0B:CB:56:AB:4B:6C:B1:11:67:D3:47:C6:5E:27:8A:3B
Certificate issuer: /CN=A913F2BD/serialNumber=97D04159FBB37EA67462B896976C1140C959E691
Certificate serial: 0140
Authority key identifier: 97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/470E849A389E11EF83D66176C4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:21:55 +0000
ROA not before: Mon 07 Jul 2025 06:13:37 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 153048
IP address blocks: 2001:df4:c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl
rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F2BD, serialNumber=97D04159FBB37EA67462B896976C1140C959E691
Validity
Not Before: Jul 7 06:13:37 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a5ab13-4f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:96:45:c7:e8:42:94:00:f9:6f:04:3d:ce:
c0:18:f9:bf:a2:7d:4a:33:96:28:98:99:69:a1:2b:
c4:c2:82:94:17:44:8e:0c:51:43:cd:94:85:c1:4d:
79:35:03:38:f6:16:b2:24:0b:e9:07:86:12:ed:10:
42:62:95:5a:b7:6d:48:ad:86:f0:e0:30:0c:96:ae:
df:fa:b8:11:f4:72:f7:ae:2e:07:20:24:a1:60:b4:
9d:54:14:e6:d2:97:58:d7:4b:9a:06:27:d0:ca:c2:
b6:41:69:ff:95:e0:f7:38:94:a2:28:30:1b:37:2a:
b7:28:57:26:e5:7c:c1:18:dd:79:11:bb:2d:16:fb:
9d:b6:f5:25:46:b6:e3:42:20:56:0e:96:27:ad:1c:
22:7b:c4:81:9f:9c:19:8f:6f:15:d0:8c:0a:65:6c:
13:79:f0:05:cc:5b:12:28:9d:7e:90:8a:3c:c8:5a:
23:30:29:fc:7d:3f:92:ce:49:c7:03:e5:fd:9b:6f:
ed:cb:50:df:42:4c:c0:d5:f3:ad:d2:77:61:77:e2:
ba:7c:6d:ae:33:d7:20:b6:fb:40:bc:d7:b6:98:60:
0a:2a:ea:93:57:93:3a:da:c9:92:7b:51:91:55:af:
69:53:dd:86:f3:30:66:d2:3e:d9:f0:44:a7:f7:11:
3e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F5:2E:62:0B:CB:56:AB:4B:6C:B1:11:67:D3:47:C6:5E:27:8A:3B
X509v3 Authority Key Identifier:
keyid:97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/470E849A389E11EF83D66176C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:c0::/48
Signature Algorithm: sha256WithRSAEncryption
7e:b0:06:8b:40:45:cf:5b:e2:dc:3c:f1:c4:02:2e:9e:95:ca:
b6:17:89:2d:74:2f:bc:8f:52:f3:d9:67:1f:67:91:21:3c:26:
67:d0:22:04:77:30:bf:be:5a:81:60:46:b7:b6:76:e2:d8:06:
33:ff:ba:85:9b:ce:a4:ab:87:1d:6a:8b:bc:2c:36:eb:4a:51:
c3:04:7a:b7:00:14:ec:9e:6f:3f:fb:c4:4b:73:58:93:e9:0c:
7d:b4:1d:b9:23:d3:d3:a9:b3:cb:af:68:e3:2f:b9:a4:2a:17:
c5:e6:ed:6d:74:9c:31:bf:d8:fa:4f:7f:af:6f:45:e9:2a:09:
80:b5:00:93:7c:6f:83:82:fd:93:e3:d4:4c:fc:8b:35:cd:60:
ea:07:4e:11:86:e4:21:d9:66:03:81:db:38:96:82:f1:b9:26:
26:49:bf:d3:9e:3b:93:64:67:39:31:53:b1:d3:e6:07:11:3c:
90:0a:46:ee:9c:e8:ee:99:6e:fd:31:ed:5b:2d:ce:4c:cc:50:
f3:05:3e:03:88:ec:3a:e9:2e:58:5a:8d:ef:8a:77:61:3c:63:
93:96:c6:da:18:fe:55:7d:a7:4d:48:aa:9d:0e:03:e3:d8:94:
78:db:03:db:b4:dd:02:99:ec:ff:60:99:6c:a3:70:07:90:b0:
37:01:0a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:53:45 2026 by rpki-client